This document discusses dimensions of e-commerce security including integrity, non-denial, authenticity, confidentiality, privacy and availability. It also outlines security threats such as malicious code, phishing, hacking and credit card fraud. Finally, it describes various technology solutions for protecting internet communications through encryption, securing communication channels using SSL and VPNs, protecting networks with firewalls, and protecting servers and clients with access controls and anti-virus software.

2. Dimensions of E-commerce Security
Integrity.
Non denial.
Authenticity.
Confidentiality.
Privacy.
Availability.

3. Security Threats in the E-commerce
Malicious Code.
Phishing.
Hacking.
Credit card fraud.
Spoofing.

4. Technology Solutions
Protecting Internet communications (encryption)
Securing channels of communication (SSL, S-HTTP,
VPNs)
Protecting networks (firewalls)
Protecting servers and clients

5. Protecting Internet Communications:
Encryption
Encryption: The process of transforming plain text or data
into cipher text that cannot be read by anyone other than
the sender and receiver.
Purpose: Secure stored information and information
transmission.
Provides:
Message integrity
Non Denial
Authentication
Confidentiality

6. Symmetric Key Encryption
Also known as secret key encryption.
Both the sender and receiver use the same
digital key to encrypt and decrypt message.
Requires a different set of keys for each
transaction.

7. Public Key Encryption
Public key cryptography solves symmetric key
encryption problem of having to exchange secret key
Uses two mathematically related digital keys – public
key (widely disseminated) and private key (kept secret
by owner)
Both keys are used to encrypt and decrypt message
Once key is used to encrypt message, same key
cannot be used to decrypt message

8. Digital Envelopes
Addresses weaknesses of public key encryption
(computationally slow, decreases transmission
speed, increases processing time) and symmetric
key encryption (faster, but more secure)
Uses symmetric key encryption to encrypt
document but public key encryption to encrypt
and send symmetric key

9. Securing Channels of Communication
Secure Sockets Layer (SSL): Most common
form of securing channels of communication.
S-HTTP: Alternative method; provides a secure
message-oriented communications protocol.
Virtual Private Networks (VPNs): Allow remote
users to securely access internal networks via
the Internet, using Point-to-Point Tunneling
Protocol (PPTP).

10. Protecting Networks: Firewalls and Proxy
Servers
Firewall: Hardware or software filters
communications packets and prevents some packets
from entering the network based on a security policy.
Proxy servers: Software servers that handle all
communications originating from or being sent to the
Internet (act as “spokesperson” or “bodyguard” for
the organization).

11. Protecting Servers and Clients
Operating system controls: Authentication
and access control mechanisms.
Anti-virus software: Easiest and least
expensive way to prevent threats to system
integrity.